Using Control Patterns in Business Processes Compliance

The realization and documentation of an effective Internal Controls System is required by regulations such as Sarbanes Oxley Act (SOX). In this paper we introduce a pattern based approach for modeling of the Internal Controls in Business Processes. They can be captured as declarative rules and checked during execution time of processes. The approach supports the definition of the controls outside of the operative Business Processes run by e-Business Systems in order to enable the reuse of process models and controls in different business and compliance environments. A detailed discussion on the domain model of Internal Controls and the system architecture necessary for realizing the approach is provided.